perf: interrupt took too long (33026 > 33023), lowering kernel.perf_event_max_sample_rate to 6000
perf: interrupt took too long (41301 > 41282), lowering kernel.perf_event_max_sample_rate to 4000
general protection fault, probably for non-canonical address 0xdffffc0000000033: 0000 [#1] PREEMPT SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000198-0x000000000000019f]
CPU: 0 PID: 14875 Comm: syz-executor.3 Not tainted 6.1.0-rc2-next-20221028 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:x86_pmu_enable_event+0x6a/0x2f0
Code: 00 e8 da 0b 47 00 48 c7 c7 60 64 60 84 e8 2e d8 35 03 48 8d bb 98 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 65 4c 8b 2d 82 20 01 7f 84 c0 74 08 3c 03 0f 8e 0c 02
RSP: 0018:ffff888015637340 EFLAGS: 00010016
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000033 RSI: 0000000000000004 RDI: 0000000000000198
RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
R13: ffff88806ce21e20 R14: ffff88806ce21c20 R15: fffffbfff0b211f7
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc93aaa4ae0 CR3: 00000000346c8000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400
Call Trace:
amd_pmu_enable_all+0x122/0x1a0
x86_pmu_enable+0x580/0xda0
perf_ctx_enable+0x110/0x1b0
__perf_event_task_sched_in+0x3c7/0x6b0
finish_task_switch.isra.0+0x46d/0x8b0
__schedule+0x89b/0x2480
preempt_schedule_common+0x45/0xd0
__cond_resched+0x17/0x40
tlb_batch_pages_flush+0xde/0x1c0
unmap_page_range+0x1628/0x2a50
unmap_single_vma+0x190/0x2b0
unmap_vmas+0x21e/0x380
exit_mmap+0x154/0x690
mmput+0xd1/0x3a0
do_exit+0x993/0x2730
do_group_exit+0xd0/0x2b0
get_signal+0x2195/0x22e0
arch_do_signal_or_restart+0x75/0x5b0
exit_to_user_mode_prepare+0x131/0x1b0
syscall_exit_to_user_mode+0x19/0x50
do_syscall_64+0x48/0xa0
entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f1a09221b19
Code: Unable to access opcode bytes at 0x7f1a09221aef.
RSP: 002b:00007f1a06797218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 00007f1a09334f68 RCX: 00007f1a09221b19
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1a09334f68
RBP: 00007f1a09334f60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a09334f6c
R13: 00007ffd33b3ff0f R14: 00007f1a06797300 R15: 0000000000022000
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:x86_pmu_enable_event+0x6a/0x2f0
Code: 00 e8 da 0b 47 00 48 c7 c7 60 64 60 84 e8 2e d8 35 03 48 8d bb 98 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 65 4c 8b 2d 82 20 01 7f 84 c0 74 08 3c 03 0f 8e 0c 02
RSP: 0018:ffff888015637340 EFLAGS: 00010016
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000033 RSI: 0000000000000004 RDI: 0000000000000198
RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
R13: ffff88806ce21e20 R14: ffff88806ce21c20 R15: fffffbfff0b211f7
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc93aaa4ae0 CR3: 00000000346c8000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400
note: syz-executor.3[14875] exited with preempt_count 4
Fixing recursive fault but reboot is needed!
BUG: scheduling while atomic: syz-executor.3/14875/0x00000000
INFO: lockdep is turned off.
Modules linked in:
irq event stamp: 4474
hardirqs last enabled at (4473): [] asm_sysvec_x86_platform_ipi-0xa/0x20
hardirqs last disabled at (4474): [] __schedule+0x1225/0x2480
softirqs last enabled at (4472): [] __irq_exit_rcu+0x11b/0x190
softirqs last disabled at (4457): [] __irq_exit_rcu+0x11b/0x190
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 0 PID: 14875 Comm: syz-executor.3 Tainted: G D 6.1.0-rc2-next-20221028 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0x8b/0xc3
__schedule_bug.cold+0x133/0x143
__schedule+0x19f3/0x2480
do_task_dead+0xd1/0x110
make_task_dead.cold+0xb0/0x1c0
rewind_stack_and_make_dead+0x17/0x30
RIP: 0033:0x7f1a09221b19
Code: Unable to access opcode bytes at 0x7f1a09221aef.
RSP: 002b:00007f1a06797218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 00007f1a09334f68 RCX: 00007f1a09221b19
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1a09334f68
RBP: 00007f1a09334f60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a09334f6c
R13: 00007ffd33b3ff0f R14: 00007f1a06797300 R15: 0000000000022000
------------[ cut here ]------------
Voluntary context switch within RCU read-side critical section!
WARNING: CPU: 0 PID: 14875 at kernel/rcu/tree_plugin.h:318 rcu_note_context_switch+0x963/0x19b0
Modules linked in:
CPU: 0 PID: 14875 Comm: syz-executor.3 Tainted: G D W 6.1.0-rc2-next-20221028 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:rcu_note_context_switch+0x963/0x19b0
Code: 48 c1 ea 03 80 3c 02 00 0f 85 85 08 00 00 49 8b 48 40 e9 a4 fa ff ff 48 c7 c7 20 91 68 84 c6 05 35 fe 59 04 01 e8 87 c9 f2 02 <0f> 0b e9 97 f7 ff ff 38 d0 7f 08 84 c0 0f 85 67 09 00 00 80 7b 11
RSP: 0018:ffff888015637db8 EFLAGS: 00010082
RAX: 0000000000000000 RBX: ffff88806ce38e00 RCX: 0000000000000000
RDX: ffff8880447bd040 RSI: ffffffff812de9fc RDI: ffffed1002ac6fa9
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000001 R11: 0000000000000001 R12: ffff8880447bd040
R13: ffff8880447bd040 R14: ffff8880447bd040 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc93aaa4ae0 CR3: 00000000346c8000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400
Call Trace:
__schedule+0x1bb/0x2480
do_task_dead+0xd1/0x110
make_task_dead.cold+0xb0/0x1c0
rewind_stack_and_make_dead+0x17/0x30
RIP: 0033:0x7f1a09221b19
Code: Unable to access opcode bytes at 0x7f1a09221aef.
RSP: 002b:00007f1a06797218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 00007f1a09334f68 RCX: 00007f1a09221b19
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1a09334f68
RBP: 00007f1a09334f60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a09334f6c
R13: 00007ffd33b3ff0f R14: 00007f1a06797300 R15: 0000000000022000
irq event stamp: 4474
hardirqs last enabled at (4473): [] asm_sysvec_x86_platform_ipi-0xa/0x20
hardirqs last disabled at (4474): [] __schedule+0x1225/0x2480
softirqs last enabled at (4472): [] __irq_exit_rcu+0x11b/0x190
softirqs last disabled at (4457): [] __irq_exit_rcu+0x11b/0x190
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess), 1 bytes skipped:
0: e8 da 0b 47 00 callq 0x470bdf
5: 48 c7 c7 60 64 60 84 mov $0xffffffff84606460,%rdi
c: e8 2e d8 35 03 callq 0x335d83f
11: 48 8d bb 98 01 00 00 lea 0x198(%rbx),%rdi
18: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
1f: fc ff df
22: 48 89 fa mov %rdi,%rdx
25: 48 c1 ea 03 shr $0x3,%rdx
* 29: 0f b6 04 02 movzbl (%rdx,%rax,1),%eax <-- trapping instruction
2d: 65 4c 8b 2d 82 20 01 mov %gs:0x7f012082(%rip),%r13 # 0x7f0120b7
34: 7f
35: 84 c0 test %al,%al
37: 74 08 je 0x41
39: 3c 03 cmp $0x3,%al
3b: 0f .byte 0xf
3c: 8e 0c 02 mov (%rdx,%rax,1),%cs